What do you need for cybersecurity risk management?

The four most common root causes for any quality issue are 1) inadequate procedures, 2) inadequate training, 3) lack of management oversight, and 4) lack of resources. Therefore, in the context of cybersecurity, do you have all of the following:
➤ A procedure or work instruction for cybersecurity
➤ Cybersecurity training for your software development team
➤ Routine monitoring and assessment of cybersecurity
➤ Internal and external resources to manage cybersecurity

Timestamps
0:00 Intro to cybersecurity risk management
3:49 Procedure or work instruction
7:15 Training
8:36 Monitoring and assessment
11:00 Internal resources, suppliers & independence
17:42 Next week we talk about De Novo Strategy